IAM Architect: SSO, MFA & Zero Trust Lead

TikTok USDS Joint Venture; San Jose (CA); Presencial; USD 147 000 - 270 000; Tempo integral

Resumo da oferta

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to define, implement, manage, and measure controls that protect data in accordance with USDS policies and standards. You will collaborate with cross-functional cyber, privacy, engineering, and data protection analysts to deploy and operationalize IAM across environments.

The role emphasizes design, deployment, and governance of IAM programs, with a focus on Zero Trust, access reviews, and lifecycle management

Qualificações

• 5+ years in Identity and Access Management, IAM architecture focus.
• Experience with authentication and authorization protocols (OIDC, OAuth 2.0, SAML 2.0) and provisioning (SCIM).
• Experience with IAM on AWS/Azure/GCP and directory services (LDAP, AD, Entra ID).
• Proficiency in at least one programming language (Python/Java/PowerShell) with automation experience.
• Familiarity with access governance, PAM, and privileged access lifecycle management.
• Knowledge of regulatory standards (ISO, NIST, SOC2, PCI).

Responsabilidades

• Develop enterprise IAM strategies and roadmaps for Workforce IAM, IGA, and PAM.
• Architect SSO, MFA, and directory services solutions (AD, Entra ID).
• Onboard applications to IAM platforms (Azure AD, Google Workspace).
• Implement automated user lifecycle workflows (joiners, movers, leavers).
• Integrate IAM with security tech (SIEM, vulnerability management).
• Ensure IAM compliance with ISO, SOC2, PCI and Zero Trust.
• Define access governance frameworks, policies, and procedures.
• Provide technical guidance to junior IAM engineers.
• Report metrics and visuals across audiences.

Conhecimentos

SSO

MFA

LDAP/AD

Python/Java/PowerShell

RESTful APIs

Zero Trust

RBAC/CA policies

Security frameworks (ISO/NIST/SOC2/PCI

Formação académica

Bachelor's or Master's in related field

Ferramentas

Okta

Ping Identity

Microsoft Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

BeyondTrust

Descrição da oferta de emprego

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to define, implement, manage, and measure controls that protect data in accordance with USDS policies and standards. You will collaborate with cross-functional cyber, privacy, engineering, and data protection analysts to deploy and operationalize IAM across environments.

The role emphasizes design, deployment, and governance of IAM programs, with a focus on Zero Trust, access reviews, and lifecycle management